Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e36332e302f32342d3234203d3e20323639383232.roa
File:                     3139302e36302e36332e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          w5kFBIXu45fKsbJAkROdSdWQgXRFI2xvO1ZpCnP6KKs=
Subject key identifier:   98:2A:EB:F0:E5:73:70:E3:C4:0D:04:51:AC:E0:E1:74:DF:F6:ED:94
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       6DB3227578807B186E429059841F31BB9CC6FA7D
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e36332e302f32342d3234203d3e20323639383232.roa
Signing time:             Fri 30 Oct 2026 19:45:00 +0000
ROA not before:           Fri 30 Oct 2026 19:40:00 +0000
ROA not after:            Fri 29 Oct 2027 19:45:00 +0000
asID:                     269822
IP address blocks:        190.60.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b3:22:75:78:80:7b:18:6e:42:90:59:84:1f:31:bb:9c:c6:fa:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Oct 30 19:40:00 2026 GMT
            Not After : Oct 29 19:45:00 2027 GMT
        Subject: CN=982AEBF0E57370E3C40D0451ACE0E174DFF6ED94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:3c:65:85:d6:a0:b4:fc:de:ef:b7:8f:b2:
                    5e:76:47:c7:c3:c4:6b:6e:d0:78:36:3d:a3:7a:50:
                    04:3f:2d:5b:15:42:87:fe:65:8b:4f:d0:ad:cf:0e:
                    92:a8:4a:cf:3a:37:e1:01:73:63:53:f0:35:c2:d1:
                    f9:bb:cb:10:a8:5f:aa:76:35:c8:ad:61:97:db:b7:
                    0e:36:8d:7f:64:ac:5f:3d:a0:61:24:10:52:95:43:
                    bb:ff:c0:af:7f:a9:0f:66:08:54:ce:7a:a0:1e:49:
                    1a:da:e2:13:11:f1:35:32:c0:00:98:cc:28:b0:93:
                    3c:54:14:07:89:52:1c:2f:57:11:1f:f7:8c:14:e0:
                    81:7d:94:8c:60:fd:33:bd:94:89:13:e9:a7:a6:2b:
                    86:c0:f0:bb:4f:04:27:75:9e:52:8f:71:65:6c:c3:
                    14:1c:7a:95:85:b3:49:ac:4c:03:7e:ca:dc:88:14:
                    c0:9c:59:fc:19:18:31:7b:2e:71:94:48:22:f4:6a:
                    40:fb:42:75:91:91:93:38:62:e8:e7:41:52:52:dd:
                    ca:4a:b3:42:19:d8:f6:af:bc:1a:f0:24:9c:2f:25:
                    00:96:12:46:5e:b9:e2:be:9c:97:57:5e:4e:28:e5:
                    c4:87:01:ae:26:03:ac:40:74:e9:85:45:5c:3c:fe:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2A:EB:F0:E5:73:70:E3:C4:0D:04:51:AC:E0:E1:74:DF:F6:ED:94
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e36332e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:a9:73:22:7f:86:cc:49:69:6b:0b:09:b6:49:99:a6:51:
         e4:e9:98:4d:76:07:71:9a:ed:df:77:4d:46:4c:22:c7:f5:0f:
         43:4a:e9:dd:8e:16:03:53:18:1b:bc:75:7d:ce:75:64:d9:93:
         9f:7d:15:77:ca:8f:98:c5:51:04:46:53:fb:c8:4d:62:15:e4:
         55:26:06:8f:02:e1:d2:4d:8e:e1:dd:b3:85:ca:2e:5f:89:62:
         5b:78:17:c1:09:f2:50:29:cd:37:a3:16:2d:c7:42:ce:5b:82:
         75:d4:e6:c9:bf:1e:c5:76:25:51:44:7b:23:bd:14:f8:be:c9:
         fe:6b:81:2b:41:cb:94:5a:c4:1a:9c:b2:93:d6:77:a2:57:37:
         15:5d:c3:55:ec:13:71:ae:a9:fa:76:5f:e3:90:66:61:95:43:
         db:90:3b:2e:13:3b:8d:6b:ff:6e:7a:be:ad:9e:e7:02:59:2c:
         3c:2e:31:72:0e:8d:60:19:3c:e2:ea:0e:c9:05:ea:f5:86:78:
         47:b3:b3:3d:4a:2f:b4:8d:3f:7b:2e:bb:c3:ae:8f:7f:85:cd:
         f7:4d:42:5f:af:79:37:43:bb:99:d4:96:c9:d2:cd:0a:bb:3a:
         74:29:fe:9b:97:2f:37:e1:90:95:f0:58:9c:86:34:23:8e:66:
         6f:b3:a9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 01:23:00 2026 by rpki-client